Overview

overview

10

Static

static

10

acee72d648...23.exe

windows7-x64

8

acee72d648...23.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    483fe860119307c2f9e2f7ed4caadc81.bin

  • Size

    21KB

  • Sample

    240613-bvxfzsyhjb

  • MD5

    fb09d95aa7abb5b75b955877625bb16c

  • SHA1

    06c5c7467fbc35356ccf1890c51e6b6ec2f655b1

  • SHA256

    15e32433351b913a8b550862fcd4e40d541dedc22e2f2ce984a36b398a339dd3

  • SHA512

    6a49c4ef1583791483e3bcc276afef871253322d60bd3923a294050079c7d15a80b94916cda605f226794d95d70a57bfcf162ac9c6e710edf24cbee8b445f2c6

  • SSDEEP

    384:y+OfX+2mVUHl88VjjhFgFmVAqXvTjhYsB93Ybcv5pHwgxhHTYwNzAWLZG7:bO22mslcgvT1YsT3Y4v5p5TYwU

Score
10/10
runningratpersistence

Malware Config

Targets

    • Target

      acee72d648216217f6208a6d648767f06252a72aa3a8f4bf88de049eecb27c23.exe

    • Size

      48KB

    • MD5

      483fe860119307c2f9e2f7ed4caadc81

    • SHA1

      b5fa21f06419e585cb9faa7227f1931a8521ca5f

    • SHA256

      acee72d648216217f6208a6d648767f06252a72aa3a8f4bf88de049eecb27c23

    • SHA512

      4590310719d9a253e71dcb46775029d1213c87f21d6d002ec78584cc5eece9fdf169af174ae287a9328c81c1699927b552fdb1b4b8d1b59f706511ae48b142c7

    • SSDEEP

      768:zynb12Aw5J6HC4kq5Jp9bjAzhyY55J+NStcEeUlyqgZl4p67dhPC:Ub1MsHz3JDwhyWr+N95OTga6u

    Score
    8/10
    persistence

    • Sets DLL path for service in the registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a Windows Service

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks